extensions/common/manifest_handlers/csp_info.h

   1 // Copyright 2013 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef EXTENSIONS_COMMON_MANIFEST_HANDLERS_CSP_INFO_H_
   6 #define EXTENSIONS_COMMON_MANIFEST_HANDLERS_CSP_INFO_H_
   7
   8 #include <string>
   9
  10 #include "extensions/common/extension.h"
  11 #include "extensions/common/manifest_handler.h"
  12
  13 namespace extensions {
  14
  15 // A structure to hold the Content-Security-Policy information.
  16 struct CSPInfo : public Extension::ManifestData {
  17   explicit CSPInfo(const std::string& security_policy);
  18   ~CSPInfo() override;
  19
  20   // The Content-Security-Policy for an extension.  Extensions can use
  21   // Content-Security-Policies to mitigate cross-site scripting and other
  22   // vulnerabilities.
  23   std::string content_security_policy;
  24
  25   static const std::string& GetContentSecurityPolicy(
  26       const Extension* extension);
  27
  28   // Returns the Content Security Policy that the specified resource should be
  29   // served with.
  30   static const std::string& GetResourceContentSecurityPolicy(
  31       const Extension* extension,
  32       const std::string& relative_path);
  33 };
  34
  35 // Parses "content_security_policy" and "app.content_security_policy" keys.
  36 class CSPHandler : public ManifestHandler {
  37  public:
  38   explicit CSPHandler(bool is_platform_app);
  39   ~CSPHandler() override;
  40
  41   bool Parse(Extension* extension, base::string16* error) override;
  42   bool AlwaysParseForType(Manifest::Type type) const override;
  43
  44  private:
  45   const std::vector<std::string> Keys() const override;
  46
  47   bool is_platform_app_;
  48
  49   DISALLOW_COPY_AND_ASSIGN(CSPHandler);
  50 };
  51
  52 }  // namespace extensions
  53
  54 #endif  // EXTENSIONS_COMMON_MANIFEST_HANDLERS_CSP_INFO_H_